last executing test programs: 16.236351232s ago: executing program 4 (id=396): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, 0x0, 0x0, 0x0) listen(r3, 0x4) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000400)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newqdisc={0xd0, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {0x3, 0xfff1}, {0xffe5, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x81, 0x31dd, 0x0, 0xfffffffd, 0x4, 0x4, 0x4}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x2, [0xf, 0x4, 0x0, 0x8, 0x0, 0x10, 0x10, 0x5, 0x8, 0xf, 0xd, 0x0, 0x7, 0x5, 0x1, 0xa], 0x1, [0xe, 0x3, 0x3, 0x40, 0x3810, 0x1000, 0x7, 0x0, 0x0, 0x4d, 0xfad, 0x0, 0x6, 0x7, 0x8, 0x8000], [0x3, 0x3ff, 0xbce4, 0x0, 0x9, 0x2d, 0x1, 0x7, 0x8, 0x8, 0x2, 0x9, 0x3d55, 0x2, 0x5, 0x22]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9dd}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc0}, 0x8001) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x5, 0x1}, {0xfff3, 0xfff1}, {0xf, 0x6}}}, 0x24}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000a40)={'sit0\x00', r6, 0x700, 0x1, 0x4, 0x8, {{0x2a, 0x4, 0x2, 0x23, 0xa8, 0x68, 0x0, 0x10, 0x29, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x3b, 0x2, [{0x0, 0x6, '(t\vz'}, {0x2, 0x9, "0a435b71398966"}, {0x0, 0xb, "28b47b117057154bf3"}, {0x5, 0x2}, {0x4, 0x9, "5094d659af11da"}, {0x1, 0x8, "3f52a0665f24"}, {0x5, 0x8, "3a4d8e35acbf"}]}, @end, @noop, @noop, @ssrr={0x89, 0x1b, 0xc3, [@broadcast, @empty, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101]}, @ssrr={0x89, 0x1f, 0x33, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x29}]}, @cipso={0x86, 0x18, 0x2, [{0x7, 0x12, "ed04c2b2aac3714382d808e94ef15958"}]}, @rr={0x7, 0x3, 0x64}]}}}}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000007c0)=0xc) syz_open_procfs$namespace(r7, &(0x7f00000003c0)='ns/time\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f00000000c0)=0xfffffffb, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) unshare(0x20000400) r8 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c", 0x48, 0x0, 0x0, 0x0) 12.689114225s ago: executing program 0 (id=411): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000140)=""/80, 0x50}], 0x1}, 0xd}], 0x1, 0x40000000, 0x0) sendmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000000c0)="2454c5cdf4ab4576daf6f10c7a51", 0xe}, {&(0x7f0000000240)="9eeecf7d88f55f3bae3ec5ce144667b4f86c8592150fc33ec371a27d75c53c55c0ce0b4ad9fd804b803397cdc41773fe2cc4d1f06852363604735905d3d3fc812480", 0x42}], 0x2}}], 0x1, 0x40000) 11.729256896s ago: executing program 3 (id=414): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) read$FUSE(r0, &(0x7f0000000880)={0x2020}, 0x2020) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x25, 0x0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@userptr={0x0, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x7, 0xc, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3d, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x800006, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x25, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x7, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1000000a, 0x2, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x3, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x8000009, 0xfffffffc, 0x3, 0x1, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0x6, 0x4e0, 0x2, 0x80000000, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x0, 0x1, 0xfe000002, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x80000001, 0x1, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d3, 0x9, 0x5, 0x8000, 0x0, 0x5, 0x7, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x4, 0x86, 0xc, 0x303c, 0x3e7, 0xb, 0x5, 0x2002, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x1080, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x2, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x7538, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0xb54, 0x101, 0x10000, 0x1ff, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x40, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1002, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x4, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_emit_ethernet(0x50, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0x0) pipe(0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x0) 10.836360015s ago: executing program 3 (id=415): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x66, 0x20900) ioctl$EVIOCGNAME(r1, 0x80404506, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x759, 0x7, 0x7d, 0x7, 0x8000, 0x4, 0x2}, 0x0, &(0x7f0000000080)={0x3fc, 0x6, 0xffffffffffffffff, 0x2000000000000003, 0x6, 0xf, 0x80000006}, 0x0, 0x0) 9.865704475s ago: executing program 4 (id=420): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/protocols\x00') r3 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) read$FUSE(r0, &(0x7f00000047c0)={0x2020}, 0x2020) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000001280), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000003600), 0x0, 0x40880) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000000)={0x5, 0x10000, 0x2}) recvmsg(r4, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)=@attr_other={0x0, 0xffffff00, 0x3, &(0x7f0000000080)=0x3}) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) 9.777533428s ago: executing program 3 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 8.205421018s ago: executing program 3 (id=424): r0 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xd014) 8.197511748s ago: executing program 0 (id=425): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0xc014}, 0x4000040) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xf68d) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 7.401211364s ago: executing program 2 (id=427): socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000a00), 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x36}, @loopback, 0xd, 0xe}}) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)}], 0x2}], 0x1, 0x40800) readv(r7, &(0x7f0000000900)=[{&(0x7f0000000600)=""/137, 0x89}, {&(0x7f00000006c0)=""/225, 0xe1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f00000007c0)=""/142, 0x8e}], 0x4) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000600000018010000786c6c2520995b00000000002020207b1af8ff00007c9603d65b8000004fa100000000000007010000f8ffffffb702000008000000b7030000000000008500000099008380097ed4e9a7ee7e386ff3cdc5cd0590e78f00133a57ee9ef28273805c07fd7a343a1837ffe732e0c90bf4fca9b9901dbb06127bb0f0e2911efa6f5d246a71ac6258f65572533d333106a11ad7d0e2f7331e3a034e243441157adcf858b06c4668f2939cb64d9e8d"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r9, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.585451132s ago: executing program 0 (id=430): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}, {0x5, 0x2201, 0x0, 0x0}], 0x3}) 5.463453815s ago: executing program 4 (id=431): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000002940)=[{0x0}, {&(0x7f0000000580)="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", 0x6fa}], 0x2}}], 0x1, 0xc049) 5.392308257s ago: executing program 4 (id=432): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, 0x0, 0x0) 5.371585008s ago: executing program 2 (id=433): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.449427287s ago: executing program 2 (id=434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x0, &(0x7f0000000340)={0xf1a, 0xfffffffffffffff8}, &(0x7f00000003c0)) 4.397841169s ago: executing program 1 (id=436): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x2000100}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe(0x0) getdents(r0, &(0x7f00000006c0)=""/138, 0x8a) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x503, 0x0, 0x800000, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 4.175255887s ago: executing program 4 (id=437): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030000000090006006e6f6e6500000000080008"], 0x58}}, 0x0) 3.351472953s ago: executing program 1 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x40, 0x78, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x207ff}, 0x94) r3 = socket(0x15, 0x5, 0x0) getsockname$llc(r3, 0x0, &(0x7f0000000040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f00000010c0)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000300), 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000340)=ANY=[], 0x21) sendfile(r6, r5, 0x0, 0x40001) 3.277410995s ago: executing program 4 (id=439): socket$inet6(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x4000) 3.090900391s ago: executing program 3 (id=440): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@sysvgroups}, {@dax_inode}, {@noauto_da_alloc}, {@minixdf}, {@data_journal}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x8000000000001) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000502, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, 0x0, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.040880555s ago: executing program 1 (id=441): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0x2}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 1.959826967s ago: executing program 0 (id=442): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x1380, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 1.695364855s ago: executing program 0 (id=443): syz_mount_image$msdos(&(0x7f0000000600), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11f0, &(0x7f0000002440)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x39a, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) 1.114619134s ago: executing program 3 (id=444): kexec_load(0x3, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1f5ed3c44eb6353c0b451fe3f9b118422addd3f936d8cd5562d6ce55bf378ee8c0d0fc56a4a866c499b04ef61edca4fc06d78b964868e16d82c97be81055b072720c06a8b8b3daad5131e84447a4809d131ce0927ee8ec587e37e0f2df3499327f170b861", 0xdf, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d", 0xb3, 0x5, 0xffffffff}, {&(0x7f0000000200)="d8f3aabb28de3faf55566e010b6ef42f8002b91bf54d78caa3135bc4a5d30a8fd06d1e70130a8d2b505e9abe3aef1de2219df6f5f695131fe4fc01630cb7751927628d8d7ec59d998200794f89eea832f53f0f9aa4c91322544bc7f07e8cdf4598c9879e4af2de4daca6cf629d11f9c6ebdccfeca156899a89ed0e619add0bb6", 0x80, 0x5, 0x4}, {0x0, 0x0, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f66cf99928f710cf98acec87a3d75a6388bab3c5a1474d29cae1f0fd92cde6f444bf490f27f37e", 0x74, 0x5, 0x6}], 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb099330a50fb6", 0x45}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d622301673217c8ca26b5a362745ea01486a2ba576eb6601dfa400bb8", 0xb6}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.114409284s ago: executing program 2 (id=445): r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 957.344089ms ago: executing program 1 (id=446): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write(r0, &(0x7f0000000180)="fba8e2bde99b035b", 0x8) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$cgroup_pid(r2, &(0x7f0000000780), 0x12) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fb, 0x8001, 0xffff1896, 0xe3, 0x24, 0xffffffb7, 0x1a}, 0x9c) 937.02062ms ago: executing program 1 (id=447): r0 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffdf) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x10082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4fa53c31, 0x0, 0x0, 0xd6f5c2bb20c3e840, 0x54, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xe, 0x401, 0xffffffff}, 0x10, 0x0, r1, 0x5, &(0x7f0000000700)=[0xffffffffffffffff, r0], &(0x7f0000000740)=[{0x0, 0x1, 0x10, 0x7}, {0x1, 0x1, 0xf, 0x1}, {0x5, 0x4, 0xc, 0x8}, {0x4, 0x4, 0x3, 0xb}, {0x4, 0x2, 0x6, 0x3}], 0x10, 0x4}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000000)=0xfffffdfb, 0x4) sendto$inet(r5, 0x0, 0xffef, 0x20048000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x26) 160.264355ms ago: executing program 1 (id=448): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0xf}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_cgroup={{0x7}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) 109.463196ms ago: executing program 0 (id=449): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 109.295986ms ago: executing program 2 (id=450): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 2 (id=451): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x69, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 63.284313][ T4175] cgroup: Unknown subsys name 'net' [ 63.427102][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.871446][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.332382][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 66.374672][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 66.392412][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 66.420525][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 66.544909][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 66.608806][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.616675][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.625327][ T4187] device bridge_slave_0 entered promiscuous mode [ 66.634021][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.641367][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.649713][ T4191] device bridge_slave_0 entered promiscuous mode [ 66.664605][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.671907][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.680047][ T4201] device bridge_slave_0 entered promiscuous mode [ 66.690029][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.697502][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.706038][ T4193] device bridge_slave_0 entered promiscuous mode [ 66.714014][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.721316][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.729349][ T4187] device bridge_slave_1 entered promiscuous mode [ 66.737563][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.744812][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.753461][ T4191] device bridge_slave_1 entered promiscuous mode [ 66.764449][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.771680][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.780378][ T4201] device bridge_slave_1 entered promiscuous mode [ 66.787269][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.794428][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.803014][ T4193] device bridge_slave_1 entered promiscuous mode [ 66.878801][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.891265][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.902750][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.920273][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.929462][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.936787][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.945439][ T4197] device bridge_slave_0 entered promiscuous mode [ 66.955554][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.967414][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.978685][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.001149][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.008351][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.016420][ T4197] device bridge_slave_1 entered promiscuous mode [ 67.025151][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.068129][ T4191] team0: Port device team_slave_0 added [ 67.091398][ T4193] team0: Port device team_slave_0 added [ 67.099704][ T4187] team0: Port device team_slave_0 added [ 67.106987][ T4191] team0: Port device team_slave_1 added [ 67.114516][ T4187] team0: Port device team_slave_1 added [ 67.128709][ T4201] team0: Port device team_slave_0 added [ 67.137444][ T4201] team0: Port device team_slave_1 added [ 67.144768][ T4193] team0: Port device team_slave_1 added [ 67.172114][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.184464][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.226758][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.233944][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.259965][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.279301][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.287212][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.313543][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.325449][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.332675][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.358792][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.370960][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.377944][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.404275][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.422624][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.430179][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.457087][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.480746][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.487827][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.514078][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.534904][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.542036][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.568236][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.582670][ T4197] team0: Port device team_slave_0 added [ 67.592722][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.599711][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.626856][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.647841][ T4197] team0: Port device team_slave_1 added [ 67.713613][ T4201] device hsr_slave_0 entered promiscuous mode [ 67.721309][ T4201] device hsr_slave_1 entered promiscuous mode [ 67.733018][ T4193] device hsr_slave_0 entered promiscuous mode [ 67.740099][ T4193] device hsr_slave_1 entered promiscuous mode [ 67.746854][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.754971][ T4193] Cannot create hsr debugfs directory [ 67.768073][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.775300][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.801342][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.823798][ T4191] device hsr_slave_0 entered promiscuous mode [ 67.831214][ T4191] device hsr_slave_1 entered promiscuous mode [ 67.837938][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.846154][ T4191] Cannot create hsr debugfs directory [ 67.856021][ T4187] device hsr_slave_0 entered promiscuous mode [ 67.863082][ T4187] device hsr_slave_1 entered promiscuous mode [ 67.869973][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.877560][ T4187] Cannot create hsr debugfs directory [ 67.883699][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.890845][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.916978][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.922874][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 68.000782][ T21] Bluetooth: hci3: command 0x0409 tx timeout [ 68.007103][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 68.013723][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 68.079899][ T21] Bluetooth: hci4: command 0x0409 tx timeout [ 68.083192][ T4197] device hsr_slave_0 entered promiscuous mode [ 68.094009][ T4197] device hsr_slave_1 entered promiscuous mode [ 68.100897][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.108488][ T4197] Cannot create hsr debugfs directory [ 68.360955][ T4193] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.372511][ T4193] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.385180][ T4193] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.395827][ T4193] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.451050][ T4201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.472757][ T4201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.486017][ T4201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.501824][ T4201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.553536][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.569536][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.580653][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.604052][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.674728][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.712926][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.723635][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.738212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.748599][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.776136][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.784148][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.809487][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.836153][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.855492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.865044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.875683][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.883169][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.893587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.903760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.912739][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.919959][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.927703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.937013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.950669][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.962202][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.969129][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.992612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.001205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.011836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.024560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.033930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.043759][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.050917][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.059425][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.069454][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.094976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.103467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.115239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.124406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.134645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.144011][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.152811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.161504][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.178882][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.191175][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.209392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.224938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.236044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.248961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.263893][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.271084][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.307441][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.329631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.367328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.379686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.389356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.401183][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.416393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.429425][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.451812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.465200][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.487923][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.501212][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.514598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.531486][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.546064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.555332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.584096][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.597880][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.607142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.634301][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.649686][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.667719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.685423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.697980][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.705186][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.714789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.736206][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.767936][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.777393][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.786806][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.795944][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.805776][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.812946][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.823798][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.853053][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.863721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.872660][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.879840][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.890592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.899341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.908248][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.915461][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.925740][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.933763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.941531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.950600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.959425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.968704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.981734][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.996342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.005609][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 70.013996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.023145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.032677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.043695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.073851][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.085919][ T4230] Bluetooth: hci2: command 0x041b tx timeout [ 70.087816][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.098939][ T4230] Bluetooth: hci1: command 0x041b tx timeout [ 70.105749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.115119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.124270][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 70.127004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.139009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.148617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.161586][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 70.185656][ T4193] device veth0_vlan entered promiscuous mode [ 70.196364][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.205182][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.214395][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.224432][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.233127][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.242930][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.253071][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.261699][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.268790][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.276884][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.286096][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.294892][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.303838][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.312717][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.319875][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.328280][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.339360][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.348362][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.358131][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.367917][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.376704][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.384783][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.393136][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.422311][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.440099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.449112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.476827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.486949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.500621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.509590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.529521][ T4193] device veth1_vlan entered promiscuous mode [ 70.546955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.555352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.564842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.575502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.585966][ T4201] device veth0_vlan entered promiscuous mode [ 70.604344][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.617887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.626209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.635289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.652897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.668137][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.677226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.707215][ T4197] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.721056][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.736332][ T4201] device veth1_vlan entered promiscuous mode [ 70.759836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.769079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.779141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.788839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.798329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.807735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.826661][ T4193] device veth0_macvtap entered promiscuous mode [ 70.846613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.855924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.872866][ T4193] device veth1_macvtap entered promiscuous mode [ 70.917473][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.937366][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.956223][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.981162][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.991612][ T4201] device veth0_macvtap entered promiscuous mode [ 71.024569][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.035256][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.043999][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.053172][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.061438][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.068980][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.078611][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.088506][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.097628][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.109404][ T4201] device veth1_macvtap entered promiscuous mode [ 71.130494][ T4193] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.139416][ T4193] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.151359][ T4193] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.160546][ T4193] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.198592][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.221532][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.229731][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.239406][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.257610][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.271509][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.285266][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.296922][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.307567][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.322048][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.343327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.352423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.362129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.370981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.379972][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.383756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.386687][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.397603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.432447][ T4201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.444988][ T4201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.454511][ T4201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.464033][ T4201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.486694][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.494928][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.503053][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.512388][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.522096][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.530897][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.546153][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.567996][ T4187] device veth0_vlan entered promiscuous mode [ 71.583221][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.602939][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.644770][ T4187] device veth1_vlan entered promiscuous mode [ 71.699506][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.712275][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.723111][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.731272][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.745146][ T4197] device veth0_vlan entered promiscuous mode [ 71.779626][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.807503][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.836911][ T4197] device veth1_vlan entered promiscuous mode [ 71.850602][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.859547][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.875584][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.886146][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.909006][ T4187] device veth0_macvtap entered promiscuous mode [ 71.938469][ T4187] device veth1_macvtap entered promiscuous mode [ 71.968007][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.980133][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.988008][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.999498][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.035062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.050844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.059245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.075429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.081698][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 72.092394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.114763][ T4197] device veth0_macvtap entered promiscuous mode [ 72.124862][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.136868][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.147080][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.158376][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.168961][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 72.175387][ T4230] Bluetooth: hci1: command 0x040f tx timeout [ 72.182348][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 72.192698][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.206634][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.221870][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.236807][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.245700][ T4230] Bluetooth: hci4: command 0x040f tx timeout [ 72.259240][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.269078][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.282733][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.285513][ T4197] device veth1_macvtap entered promiscuous mode [ 72.297114][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.313150][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.324377][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.335137][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.345904][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.361345][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.371025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.380422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.388627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.397839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.428271][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.440510][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.451580][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.468678][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.504377][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.518368][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.530426][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.547038][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.556012][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.566798][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.576158][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.590749][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.601176][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.611172][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.620692][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.652088][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.664188][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.675149][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.686007][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.711582][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.741899][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.753810][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.888535][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.919140][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.996114][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.010781][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.179240][ T4273] loop1: detected capacity change from 0 to 40427 [ 73.188952][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.202781][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.212054][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.222135][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.232815][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.241208][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.249529][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.258252][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.268330][ T4191] device veth0_vlan entered promiscuous mode [ 73.300758][ T4273] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 73.307338][ T4273] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 73.328656][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.338783][ T4273] F2FS-fs (loop1): invalid crc value [ 73.357309][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.370657][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.379381][ T4273] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 73.415804][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.466002][ T4191] device veth1_vlan entered promiscuous mode [ 73.475044][ T4273] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 73.482459][ T4273] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.523597][ T4270] attempt to access beyond end of device [ 73.523597][ T4270] loop1: rw=2049, want=45112, limit=40427 [ 73.720199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.996419][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.024538][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.161143][ T4228] Bluetooth: hci0: command 0x0419 tx timeout [ 74.187380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.226485][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.235238][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.245059][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 74.264474][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.270596][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 74.278885][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 74.288018][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.809304][ T4192] Bluetooth: hci4: command 0x0419 tx timeout [ 74.876344][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.919475][ T4191] device veth0_macvtap entered promiscuous mode [ 74.983615][ T4191] device veth1_macvtap entered promiscuous mode [ 75.090015][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.141089][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.257080][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.299127][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.325351][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.368142][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.407147][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.552653][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.089820][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 76.130606][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.140810][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.160058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.187900][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.330060][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.391143][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.439320][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.490395][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.509853][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.529859][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.549799][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.575273][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.603821][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.628228][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.708646][ T4332] loop3: detected capacity change from 0 to 1024 [ 76.795959][ T4332] hfsplus: failed to load root directory [ 78.530395][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.538962][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.046347][ T4368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29'. [ 79.081934][ T4368] netlink: 36 bytes leftover after parsing attributes in process `syz.1.29'. [ 79.836598][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.916429][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.002505][ T4327] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.012008][ T4327] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.021706][ T4327] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.030774][ T4327] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.170347][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.184822][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.194348][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.208863][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.210004][ T4327] syz.2.20 (4327) used greatest stack depth: 19472 bytes left [ 81.304300][ T4378] netlink: 14 bytes leftover after parsing attributes in process `syz.1.34'. [ 81.374560][ T4388] loop0: detected capacity change from 0 to 512 [ 81.386976][ T4378] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.414203][ T4378] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.438210][ T4378] bond0 (unregistering): Released all slaves [ 81.686092][ T4383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.708112][ T4383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.719679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.016546][ T4388] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.081350][ T4388] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.218956][ T4388] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 82.855601][ T4403] netlink: 36 bytes leftover after parsing attributes in process `syz.1.40'. [ 82.939972][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.947963][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.023370][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.071038][ T4388] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004,. Quota mode: none. [ 83.136084][ T4388] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #2: comm syz.0.37: Directory hole found for htree leaf block 0 [ 83.360241][ T4388] EXT4-fs (loop0): Remounting filesystem read-only [ 83.457156][ T4428] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.881223][ T4423] loop3: detected capacity change from 0 to 4096 [ 84.323303][ T4423] NILFS (loop3): invalid segment: Checksum error in segment payload [ 84.355453][ T4423] NILFS (loop3): trying rollback from an earlier position [ 84.467003][ T4423] NILFS (loop3): recovery complete [ 84.909692][ T4448] loop0: detected capacity change from 0 to 512 [ 85.213400][ T4445] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.434920][ T4473] usb usb5: usbfs: process 4473 (syz.2.63) did not claim interface 0 before use [ 87.236422][ T2856] cfg80211: failed to load regulatory.db [ 89.210040][ T4490] fuse: Bad value for 'fd' [ 89.442944][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 89.483207][ T4496] Zero length message leads to an empty skb [ 89.499911][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.717958][ T4501] device sit0 entered promiscuous mode [ 89.739645][ T4501] netlink: 21 bytes leftover after parsing attributes in process `syz.3.73'. [ 90.175540][ T7] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 90.185017][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.198662][ T7] usb 5-1: config 0 descriptor?? [ 90.254350][ T7] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 90.278848][ T4488] loop2: detected capacity change from 0 to 32768 [ 90.618227][ T4488] XFS (loop2): Mounting V5 Filesystem [ 91.193764][ T7] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 91.300816][ T4488] XFS (loop2): Ending clean mount [ 91.470031][ T7] gspca_cpia1: usb_control_msg 02, error -71 [ 91.491098][ T7] gspca_cpia1: usb_control_msg 05, error -71 [ 91.535518][ T7] cpia1 5-1:0.0: unexpected systemstate: 00 [ 91.624161][ T7] usb 5-1: USB disconnect, device number 2 [ 92.130206][ T4197] XFS (loop2): Unmounting Filesystem [ 92.225820][ T4539] loop4: detected capacity change from 0 to 2048 [ 92.343591][ T4541] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.365419][ T4539] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=0, inode=7, rec_len=16, name_len=1 [ 92.394201][ T4539] Remounting filesystem read-only [ 92.406222][ T4539] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 92.633567][ T4533] loop3: detected capacity change from 0 to 32768 [ 92.702795][ T4533] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.80 (4533) [ 92.955644][ T4533] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 92.966458][ T4533] BTRFS info (device loop3): metadata ratio 0 [ 92.973081][ T4533] BTRFS info (device loop3): using free space tree [ 92.981033][ T4533] BTRFS info (device loop3): has skinny extents [ 94.669801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.689793][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.699782][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.709781][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.719777][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 94.889821][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 94.899798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 94.909788][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 94.919800][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 95.473757][ T4533] BTRFS error (device loop3): open_ctree failed: -12 [ 95.553171][ T4179] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by udevd (4179) [ 95.799825][ T4344] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.812114][ T4582] sctp: failed to load transform for md5: -2 [ 96.841389][ T4596] sctp: failed to load transform for md5: -2 [ 96.979920][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.000095][ T4344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.061304][ T4344] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 97.112737][ T4344] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 97.158104][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.223993][ T4344] usb 1-1: config 0 descriptor?? [ 98.187180][ T4344] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 99.212544][ T4344] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 99.257362][ T4344] usb 1-1: USB disconnect, device number 2 [ 99.571971][ T4634] fido_id[4634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 99.891835][ T4644] loop0: detected capacity change from 0 to 32768 [ 99.999909][ T4644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.105 (4644) [ 100.018329][ T4644] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.027107][ T4644] BTRFS info (device loop0): turning on async discard [ 100.034025][ T4644] BTRFS info (device loop0): metadata ratio 0 [ 100.040239][ T4644] BTRFS info (device loop0): setting nodatasum [ 100.046427][ T4644] BTRFS info (device loop0): using free space tree [ 100.053050][ T4644] BTRFS info (device loop0): has skinny extents [ 100.207940][ T4622] loop4: detected capacity change from 0 to 32768 [ 100.305092][ T4622] XFS (loop4): Mounting V5 Filesystem [ 100.440060][ T4644] BTRFS info (device loop0): enabling ssd optimizations [ 100.464544][ T4622] XFS (loop4): Ending clean mount [ 100.509223][ T26] audit: type=1800 audit(1779574804.615:2): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.105" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 100.877611][ T4191] XFS (loop4): Unmounting Filesystem [ 101.975820][ T4682] device vlan2 entered promiscuous mode [ 101.992644][ T4682] device bridge0 entered promiscuous mode [ 103.185177][ T4701] loop4: detected capacity change from 0 to 256 [ 103.200496][ T4700] capability: warning: `syz.2.113' uses deprecated v2 capabilities in a way that may be insecure [ 103.263717][ T4703] loop3: detected capacity change from 0 to 2048 [ 103.339033][ T4701] FAT-fs (loop4): Directory bread(block 64) failed [ 103.402666][ T4701] FAT-fs (loop4): Directory bread(block 65) failed [ 103.552715][ T4703] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,barrier,barrier,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 103.577089][ T4701] FAT-fs (loop4): Directory bread(block 66) failed [ 103.679441][ T4701] FAT-fs (loop4): Directory bread(block 67) failed [ 103.769332][ T4701] FAT-fs (loop4): Directory bread(block 68) failed [ 103.921475][ T4701] FAT-fs (loop4): Directory bread(block 69) failed [ 103.938225][ T4703] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 103.972714][ T4712] EXT4-fs (loop3): shut down requested (1) [ 104.063049][ T4701] FAT-fs (loop4): Directory bread(block 70) failed [ 104.206270][ T4701] FAT-fs (loop4): Directory bread(block 71) failed [ 104.276300][ T4703] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 15, error -5) [ 104.303110][ T4701] FAT-fs (loop4): Directory bread(block 72) failed [ 104.310981][ T4701] FAT-fs (loop4): Directory bread(block 73) failed [ 104.784228][ T4728] 9pnet_virtio: no channels available for device 127.0.0.1 [ 107.339040][ T4725] loop2: detected capacity change from 0 to 256 [ 108.922406][ T4746] netlink: 'syz.2.127': attribute type 2 has an invalid length. [ 108.930545][ T4746] netlink: 224 bytes leftover after parsing attributes in process `syz.2.127'. [ 110.036817][ T4757] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.622449][ T4755] 9pnet: p9_fd_create_tcp (4755): problem connecting socket to 127.0.0.1 [ 111.743598][ T4752] loop3: detected capacity change from 0 to 32768 [ 111.798330][ T4752] XFS (loop3): Mounting V5 Filesystem [ 111.948581][ T4752] XFS (loop3): Ending clean mount [ 113.407665][ T4201] XFS (loop3): Unmounting Filesystem [ 114.738374][ T4797] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 114.958833][ T4810] loop0: detected capacity change from 0 to 1024 [ 115.046163][ T4810] EXT4-fs (loop0): inline encryption not supported [ 115.091900][ T4814] fuse: Bad value for 'fd' [ 115.108814][ T4810] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000006,norecovery,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,acl,norecovery,,errors=continue. Quota mode: none. [ 116.699755][ C0] sched: RT throttling activated [ 117.190762][ T4834] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 117.197707][ T4834] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.451584][ T4834] vhci_hcd vhci_hcd.0: Device attached [ 117.751415][ T4809] loop3: detected capacity change from 0 to 32768 [ 117.774336][ T4809] ======================================================= [ 117.774336][ T4809] WARNING: The mand mount option has been deprecated and [ 117.774336][ T4809] and is ignored by this kernel. Remove the mand [ 117.774336][ T4809] option from the mount to silence this warning. [ 117.774336][ T4809] ======================================================= [ 117.790221][ T4587] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 117.816916][ T4591] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.920357][ T4591] usb 1-1: Using ep0 maxpacket: 8 [ 118.956486][ T4809] (syz.3.134,4809,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 119.008391][ T4835] vhci_hcd: connection closed [ 119.011440][ T155] vhci_hcd: stop threads [ 119.061430][ T155] vhci_hcd: release socket [ 119.066983][ T155] vhci_hcd: disconnect device [ 119.113938][ T4809] (syz.3.134,4809,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 119.200393][ T4587] vhci_hcd: vhci_device speed not set [ 119.219885][ T4591] usb 1-1: unable to get BOS descriptor or descriptor too short [ 119.227697][ T4591] usb 1-1: no configurations [ 119.239794][ T4591] usb 1-1: can't read configurations, error -22 [ 120.076824][ T4858] loop0: detected capacity change from 0 to 1024 [ 120.206862][ T4858] EXT4-fs (loop0): Ignoring removed orlov option [ 120.357498][ T4858] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 121.985898][ T4886] process 'syz.4.162' launched './file2' with NULL argv: empty string added [ 122.763425][ T4892] loop0: detected capacity change from 0 to 512 [ 123.867413][ T4892] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.920112][ T4898] loop2: detected capacity change from 0 to 1768 [ 125.253234][ T4892] EXT4-fs: error -4 creating inode table initialization thread [ 125.317526][ T4892] EXT4-fs (loop0): mount failed [ 127.437570][ T4940] loop0: detected capacity change from 0 to 512 [ 128.050013][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.084494][ T4940] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,noinit_itable,abort,bsdgroups,,errors=continue. Quota mode: writeback. [ 128.102971][ T4940] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.339971][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 128.470069][ T7] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.719798][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.809935][ T7] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 129.840683][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.873731][ T7] usb 5-1: Product: syz [ 129.901883][ T7] usb 5-1: Manufacturer: syz [ 129.914044][ T7] usb 5-1: SerialNumber: syz [ 129.939075][ T7] usb 5-1: config 0 descriptor?? [ 130.415136][ T4963] tipc: Started in network mode [ 130.421022][ T4963] tipc: Node identity ac1414aa, cluster identity 4711 [ 130.438368][ T4963] tipc: Enabled bearer , priority 10 [ 130.521770][ T4963] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 130.531534][ T4963] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 131.490080][ T7] usb 5-1: can't set config #0, error -71 [ 131.514446][ T7] usb 5-1: USB disconnect, device number 3 [ 131.552642][ T4587] tipc: Node number set to 2886997162 [ 131.859907][ T4587] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 132.817379][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829640][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.870995][ T4587] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 133.022910][ T4587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.379005][ T4587] usb 3-1: config 0 descriptor?? [ 133.432071][ T4587] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 134.927549][ T5008] loop0: detected capacity change from 0 to 8 [ 134.949993][ T4587] gspca_cpia1: usb_control_msg 03, error -71 [ 134.979834][ T4587] gspca_cpia1: usb_control_msg 01, error -71 [ 134.985907][ T4587] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 137.267022][ T4587] usb 3-1: USB disconnect, device number 2 [ 137.549227][ T5026] loop3: detected capacity change from 0 to 128 [ 137.846367][ T5034] loop4: detected capacity change from 0 to 1024 [ 138.731473][ T5034] hfsplus: bad catalog entry used to create inode [ 138.789909][ T5034] hfsplus: failed to load root directory [ 139.254154][ T5055] raw_sendmsg: syz.2.214 forgot to set AF_INET. Fix it! [ 139.331628][ T5056] comedi comedi3: rti800: I/O port conflict (0x5,16) [ 140.118095][ T5068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.215'. [ 141.068939][ T5068] syz.2.215 (5068) used greatest stack depth: 17232 bytes left [ 143.542061][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.222'. [ 145.218636][ T5148] loop2: detected capacity change from 0 to 1024 [ 145.506037][ T5174] syz.1.229 uses obsolete (PF_INET,SOCK_PACKET) [ 146.419657][ T5198] loop2: detected capacity change from 0 to 512 [ 146.928930][ T5198] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 146.942179][ T5198] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.994318][ T5198] EXT4-fs error (device loop2): ext4_init_orphan_info:621: comm syz.2.235: orphan file block 0: bad magic [ 147.016503][ T5198] EXT4-fs (loop2): mount failed [ 147.412360][ T5204] loop0: detected capacity change from 0 to 1024 [ 147.668339][ T5204] EXT4-fs (loop0): inline encryption not supported [ 147.960126][ T5204] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 148.130401][ T5204] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 148.478807][ T5229] dlm: dev_write: no op 0 0 [ 148.624909][ T5237] loop0: detected capacity change from 0 to 512 [ 149.544186][ T5237] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 149.905675][ T5254] loop3: detected capacity change from 0 to 1024 [ 149.913627][ T5237] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.103083][ T5262] EXT4-fs (loop0): shut down requested (2) [ 150.126966][ T5254] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 150.349384][ T5254] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 156.559882][ T4591] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 156.961544][ T4591] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.982665][ T4591] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 157.210152][ T4591] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 157.219260][ T4591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.248960][ T4591] usb 3-1: Product: syz [ 157.269349][ T4591] usb 3-1: Manufacturer: syz [ 157.282145][ T4591] usb 3-1: SerialNumber: syz [ 157.820204][ T4591] usb 3-1: 0:2 : does not exist [ 157.940862][ T4591] usb 3-1: USB disconnect, device number 3 [ 158.048499][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.072810][ T5363] loop3: detected capacity change from 0 to 40427 [ 159.261726][ T5363] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 159.350604][ T5363] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 159.357869][ T5363] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 159.739329][ T5373] xt_connbytes: Forcing CT accounting to be enabled [ 159.746420][ T5373] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.092809][ T5405] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 163.289823][ T4683] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 163.352078][ T5411] input: syz1 as /devices/virtual/input/input5 [ 164.219797][ T4683] usb 4-1: Using ep0 maxpacket: 32 [ 164.445914][ T5427] loop0: detected capacity change from 0 to 512 [ 164.655631][ T5427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.700017][ T4683] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 164.740465][ T4683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.750756][ T5427] EXT4-fs (loop0): 1 truncate cleaned up [ 164.756446][ T5427] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,init_itable,noauto_da_alloc,,errors=continue. Quota mode: none. [ 164.829746][ T4683] usb 4-1: Product: syz [ 164.833985][ T4683] usb 4-1: Manufacturer: syz [ 165.120173][ T4683] usb 4-1: can't set config #1, error -71 [ 165.667174][ T5441] loop4: detected capacity change from 0 to 512 [ 165.800871][ T4683] usb 4-1: USB disconnect, device number 2 [ 167.428368][ T5464] loop2: detected capacity change from 0 to 1024 [ 167.543937][ T5472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.293'. [ 168.558921][ T5441] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.586316][ T5464] attempt to access beyond end of device [ 168.586316][ T5464] loop2: rw=2057, want=65536, limit=1024 [ 168.599619][ T5464] attempt to access beyond end of device [ 168.599619][ T5464] loop2: rw=1, want=2310, limit=1024 [ 168.618289][ T5464] attempt to access beyond end of device [ 168.618289][ T5464] loop2: rw=1, want=4358, limit=1024 [ 168.633863][ T5464] attempt to access beyond end of device [ 168.633863][ T5464] loop2: rw=1, want=6406, limit=1024 [ 168.674725][ T5464] attempt to access beyond end of device [ 168.674725][ T5464] loop2: rw=1, want=8454, limit=1024 [ 168.690864][ T5480] xt_hashlimit: max too large, truncated to 1048576 [ 169.134903][ T5464] attempt to access beyond end of device [ 169.134903][ T5464] loop2: rw=1, want=10502, limit=1024 [ 169.146765][ T5464] attempt to access beyond end of device [ 169.146765][ T5464] loop2: rw=1, want=12550, limit=1024 [ 169.180524][ T5464] attempt to access beyond end of device [ 169.180524][ T5464] loop2: rw=1, want=14598, limit=1024 [ 169.641898][ T5464] attempt to access beyond end of device [ 169.641898][ T5464] loop2: rw=1, want=16646, limit=1024 [ 169.835525][ T5464] attempt to access beyond end of device [ 169.835525][ T5464] loop2: rw=1, want=18694, limit=1024 [ 170.015057][ T5490] loop0: detected capacity change from 0 to 1764 [ 170.608997][ T5505] netlink: 48 bytes leftover after parsing attributes in process `syz.2.307'. [ 170.880274][ T4587] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 171.095277][ T5510] device bond0 entered promiscuous mode [ 171.163477][ T5510] device bond_slave_0 entered promiscuous mode [ 171.300696][ T4587] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 171.317904][ T5510] device bond_slave_1 entered promiscuous mode [ 171.357472][ T4587] usb 4-1: config 0 has no interface number 0 [ 171.486890][ T4587] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 171.567854][ T4587] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.793332][ T4587] usb 4-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 171.816905][ T4587] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 171.826340][ T4587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.907009][ T5519] loop2: detected capacity change from 0 to 8 [ 172.073717][ T5519] SQUASHFS error: zlib decompression failed, data probably corrupt [ 172.082448][ T5519] SQUASHFS error: Failed to read block 0x4de: -5 [ 172.091218][ T5519] SQUASHFS error: Failed to read block 0x4e2: -5 [ 172.123690][ T5519] SQUASHFS error: Failed to read block 0x9ca: -5 [ 172.130298][ T5519] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 172.136851][ T5519] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 172.143475][ T5519] SQUASHFS error: Failed to read block 0x535f2: -5 [ 172.210014][ T26] audit: type=1800 audit(1779574876.275:3): pid=5519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.311" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 172.460372][ T4587] usb 4-1: config 0 descriptor?? [ 172.760892][ T5531] tipc: Started in network mode [ 172.765940][ T5531] tipc: Node identity 4, cluster identity 4711 [ 172.772268][ T5531] tipc: Node number set to 4 [ 173.621097][ T4587] usb 4-1: USB disconnect, device number 3 [ 174.154756][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 175.357412][ T5561] loop0: detected capacity change from 0 to 2048 [ 177.222988][ T5561] UDF-fs: bad mount option "./cgroup.cpu/syz1" or missing value [ 181.555555][ T5598] device syzkaller0 entered promiscuous mode [ 184.632408][ T5623] loop3: detected capacity change from 0 to 32768 [ 184.897997][ T5623] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 185.244554][ T4201] ocfs2: Unmounting device (7,3) on (node local) [ 185.797499][ T5653] loop3: detected capacity change from 0 to 8192 [ 185.798984][ T5647] loop0: detected capacity change from 0 to 32768 [ 185.838651][ T5653] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 185.849532][ T5653] REISERFS (device loop3): using ordered data mode [ 185.856189][ T5653] reiserfs: using flush barriers [ 185.865786][ T5653] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 185.884465][ T5653] REISERFS (device loop3): checking transaction log (loop3) [ 185.919530][ T5647] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.350 (5647) [ 185.941009][ T5653] REISERFS (device loop3): Using r5 hash to sort names [ 185.959895][ T5653] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 186.180405][ T5647] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 186.430407][ T5647] BTRFS info (device loop0): setting nodatacow, compression disabled [ 186.439076][ T5647] BTRFS info (device loop0): force clearing of disk cache [ 186.499816][ T5647] BTRFS info (device loop0): enabling ssd optimizations [ 186.506862][ T5647] BTRFS info (device loop0): using spread ssd allocation scheme [ 187.580748][ T5647] BTRFS info (device loop0): turning off barriers [ 187.587300][ T5647] BTRFS info (device loop0): disabling free space tree [ 187.602187][ T5647] BTRFS info (device loop0): not using ssd optimizations [ 187.649839][ T5647] BTRFS info (device loop0): not using spread ssd allocation scheme [ 187.657903][ T5647] BTRFS info (device loop0): has skinny extents [ 187.938812][ T5647] BTRFS info (device loop0): clearing free space tree [ 187.948918][ T5647] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.059850][ T5647] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.436170][ T5699] loop3: detected capacity change from 0 to 512 [ 188.528707][ T4179] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4179) [ 188.554393][ T5699] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.635354][ T5699] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 188.760489][ T5699] EXT4-fs (loop3): 1 truncate cleaned up [ 188.801019][ T5699] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000066,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 189.649631][ T5712] loop0: detected capacity change from 0 to 4096 [ 189.755389][ T5712] ntfs: volume version 3.1. [ 190.956290][ T5726] kAFS: unable to lookup cell 'Þ({^ú@' [ 190.976837][ T5726] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 191.419091][ T4261] Bluetooth: hci0: command 0x0406 tx timeout [ 191.437425][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 191.443703][ T4234] Bluetooth: hci2: command 0x0406 tx timeout [ 191.450238][ T4234] Bluetooth: hci4: command 0x0406 tx timeout [ 191.456307][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 191.873909][ T5726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.975680][ T5728] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.023265][ T5728] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 192.055255][ T5728] bond1: (slave vxcan1): Error -22 calling dev_set_mtu [ 192.193708][ T4351] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 192.252300][ T5742] loop3: detected capacity change from 0 to 128 [ 192.322073][ T5742] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 192.396373][ T5742] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.491734][ T4351] usb 1-1: Using ep0 maxpacket: 16 [ 192.655657][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.672735][ T4351] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.706006][ T4351] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 192.755414][ T4351] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 192.774409][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.809321][ T4351] usb 1-1: config 0 descriptor?? [ 193.311849][ T4351] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 193.408794][ T4351] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 193.428959][ T4351] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 193.477799][ T4351] microsoft 0003:045E:07DA.0003: no inputs found [ 193.488272][ T4351] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 193.547057][ T4351] usb 1-1: USB disconnect, device number 5 [ 193.746362][ T5758] fido_id[5758]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 193.798467][ T5761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.378'. [ 193.979395][ T5763] loop3: detected capacity change from 0 to 512 [ 195.492482][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.498892][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.590706][ T5763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 195.752281][ T5763] EXT4-fs (loop3): 1 truncate cleaned up [ 195.758109][ T5763] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x0000000000000066,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 198.147124][ T146] Bluetooth: Unexpected continuation frame (len 16) [ 198.929157][ T5784] loop4: detected capacity change from 0 to 2048 [ 200.460055][ T5790] fuse: Bad value for 'fd' [ 200.614110][ T5791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.654549][ T5784] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 200.679144][ T5784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.979819][ T4261] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 214.358954][ T5949] device bridge1 entered promiscuous mode [ 214.430695][ T4261] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.502904][ T4261] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 214.618906][ T4261] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 214.703299][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.922301][ T4261] usb 1-1: config 0 descriptor?? [ 214.968536][ T4261] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 214.996233][ T4261] dvb-usb: bulk message failed: -22 (3/0) [ 215.031166][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.437'. [ 215.073095][ T4261] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 215.110444][ T4261] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 215.129519][ T4261] usb 1-1: media controller created [ 215.171382][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 215.181976][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.258332][ T4261] dvb-usb: bulk message failed: -22 (6/0) [ 215.294357][ T5957] loop4: detected capacity change from 0 to 1024 [ 215.332767][ T4261] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 215.399228][ T5959] overlayfs: failed to clone upperpath [ 216.255100][ T4261] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 216.285536][ T5960] loop3: detected capacity change from 0 to 512 [ 216.322368][ T4261] dvb-usb: schedule remote query interval to 150 msecs. [ 216.372326][ T5960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.411723][ T5960] EXT4-fs (loop3): 1 truncate cleaned up [ 216.418341][ T5960] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,dax=inode,noauto_da_alloc,minixdf,data=journal,quota,,errors=continue. Quota mode: writeback. [ 216.418395][ T5957] EXT4-fs (loop4): Ignoring removed bh option [ 216.467013][ T4261] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 216.689830][ T4261] usb 1-1: USB disconnect, device number 6 [ 217.319524][ T5972] loop0: detected capacity change from 0 to 8192 [ 217.515028][ T4261] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 217.646189][ T5987] 9pnet_virtio: no channels available for device 127.0.0.1 [ 217.966073][ T5957] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback. [ 218.342550][ T6000] overlayfs: failed to resolve './file0': -2 [ 218.374270][ T6001] [ 218.376691][ T6001] ============================= [ 218.410604][ T6001] WARNING: suspicious RCU usage [ 218.415535][ T6001] syzkaller #0 Not tainted [ 218.430516][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 218.460662][ T6001] ----------------------------- [ 218.513559][ T6001] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 218.552710][ T6001] [ 218.552710][ T6001] other info that might help us debug this: [ 218.552710][ T6001] [ 218.596545][ T6001] [ 218.596545][ T6001] rcu_scheduler_active = 2, debug_locks = 1 [ 218.623207][ T6001] 1 lock held by syz.0.449/6001: [ 218.628538][ T6001] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 218.653218][ T6001] [ 218.653218][ T6001] stack backtrace: [ 218.659396][ T6001] CPU: 0 PID: 6001 Comm: syz.0.449 Not tainted syzkaller #0 [ 218.666722][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.676836][ T6001] Call Trace: [ 218.680171][ T6001] [ 218.683152][ T6001] dump_stack_lvl+0x188/0x250 [ 218.687890][ T6001] ? load_image+0x400/0x400 [ 218.692458][ T6001] ? show_regs_print_info+0x20/0x20 [ 218.697732][ T6001] ? lockdep_rcu_suspicious+0x110/0x180 [ 218.703436][ T6001] ? local_bh_enable+0x20/0x20 [ 218.708270][ T6001] rhltable_lookup+0x7a9/0x7c0 [ 218.713092][ T6001] ? local_bh_enable+0x20/0x20 [ 218.717920][ T6001] ? mr_mfc_find_parent+0x190/0x190 [ 218.723186][ T6001] ? mark_lock+0x94/0x320 [ 218.727568][ T6001] ? local_bh_enable+0x20/0x20 [ 218.732372][ T6001] ? mark_lock+0x94/0x320 [ 218.736747][ T6001] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 218.742775][ T6001] ? lock_chain_count+0x20/0x20 [ 218.747663][ T6001] mr_mfc_find_any_parent+0xb6/0x1e0 [ 218.752984][ T6001] ? local_bh_enable+0x20/0x20 [ 218.757798][ T6001] ip_mr_forward+0x24c/0xf90 [ 218.762428][ T6001] ipmr_mfc_add+0x23cc/0x2d40 [ 218.767146][ T6001] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 218.772113][ T6001] ? __lock_acquire+0x7d10/0x7d10 [ 218.777180][ T6001] ip_mroute_setsockopt+0xeaf/0x1250 [ 218.782504][ T6001] ? ipmr_rule_default+0x70/0x70 [ 218.787482][ T6001] ? __might_sleep+0xf0/0xf0 [ 218.792111][ T6001] ip_setsockopt+0x568/0x3130 [ 218.796831][ T6001] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 218.802227][ T6001] ? aa_sk_perm+0x7dc/0x910 [ 218.806766][ T6001] ? aa_af_perm+0x340/0x340 [ 218.811295][ T6001] ? __fget_files+0x40f/0x480 [ 218.816004][ T6001] ? aa_sock_opt_perm+0x74/0x100 [ 218.820974][ T6001] ? sock_common_setsockopt+0x32/0xb0 [ 218.826370][ T6001] ? raw_setsockopt+0xc5/0x180 [ 218.831187][ T6001] ? sock_common_recvmsg+0x1c0/0x1c0 [ 218.836504][ T6001] __sys_setsockopt+0x2bf/0x3d0 [ 218.841390][ T6001] __x64_sys_setsockopt+0xb1/0xc0 [ 218.846453][ T6001] do_syscall_64+0x4c/0xa0 [ 218.850905][ T6001] ? clear_bhb_loop+0x30/0x80 [ 218.855612][ T6001] ? clear_bhb_loop+0x30/0x80 [ 218.860328][ T6001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 218.866377][ T6001] RIP: 0033:0x7fc0ed846e59 [ 218.870840][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.890685][ T6001] RSP: 002b:00007fc0ebaa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.899133][ T6001] RAX: ffffffffffffffda RBX: 00007fc0edabffa0 RCX: 00007fc0ed846e59 [ 218.907141][ T6001] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 218.915141][ T6001] RBP: 00007fc0ed8dcd6f R08: 000000000000003c R09: 0000000000000000 [ 218.923141][ T6001] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 218.931141][ T6001] R13: 00007fc0edac0038 R14: 00007fc0edabffa0 R15: 00007fff3893c5e8 [ 218.939159][ T6001] [ 218.942303][ C0] vkms_vblank_simulate: vblank timer overrun [ 218.960934][ T6001] [ 218.963524][ T6001] ============================= [ 218.968420][ T6001] WARNING: suspicious RCU usage [ 218.976107][ T6001] syzkaller #0 Not tainted [ 218.980662][ T6001] ----------------------------- [ 218.986237][ T6001] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 218.997409][ T6001] [ 218.997409][ T6001] other info that might help us debug this: [ 218.997409][ T6001] [ 219.007997][ T6001] [ 219.007997][ T6001] rcu_scheduler_active = 2, debug_locks = 1 [ 219.016414][ T6001] 1 lock held by syz.0.449/6001: [ 219.021519][ T6001] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 219.031642][ T6001] [ 219.031642][ T6001] stack backtrace: [ 219.037584][ T6001] CPU: 1 PID: 6001 Comm: syz.0.449 Not tainted syzkaller #0 [ 219.045009][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.055118][ T6001] Call Trace: [ 219.058442][ T6001] [ 219.061497][ T6001] dump_stack_lvl+0x188/0x250 [ 219.066230][ T6001] ? load_image+0x400/0x400 [ 219.070791][ T6001] ? show_regs_print_info+0x20/0x20 [ 219.076058][ T6001] ? lockdep_rcu_suspicious+0x110/0x180 [ 219.081673][ T6001] ? local_bh_enable+0x20/0x20 [ 219.086499][ T6001] rhltable_lookup+0x52a/0x7c0 [ 219.091318][ T6001] ? local_bh_enable+0x20/0x20 [ 219.096144][ T6001] ? mr_mfc_find_parent+0x190/0x190 [ 219.101999][ T6001] ? mark_lock+0x94/0x320 [ 219.106380][ T6001] ? local_bh_enable+0x20/0x20 [ 219.111193][ T6001] ? mark_lock+0x94/0x320 [ 219.115576][ T6001] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 219.121614][ T6001] ? lock_chain_count+0x20/0x20 [ 219.126522][ T6001] mr_mfc_find_any_parent+0xb6/0x1e0 [ 219.131858][ T6001] ? local_bh_enable+0x20/0x20 [ 219.136679][ T6001] ip_mr_forward+0x24c/0xf90 [ 219.141338][ T6001] ipmr_mfc_add+0x23cc/0x2d40 [ 219.146094][ T6001] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 219.151094][ T6001] ? __lock_acquire+0x7d10/0x7d10 [ 219.156200][ T6001] ip_mroute_setsockopt+0xeaf/0x1250 [ 219.161557][ T6001] ? ipmr_rule_default+0x70/0x70 [ 219.166582][ T6001] ? __might_sleep+0xf0/0xf0 [ 219.171231][ T6001] ip_setsockopt+0x568/0x3130 [ 219.175979][ T6001] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 219.181423][ T6001] ? aa_sk_perm+0x7dc/0x910 [ 219.186105][ T6001] ? aa_af_perm+0x340/0x340 [ 219.190659][ T6001] ? __fget_files+0x40f/0x480 [ 219.195403][ T6001] ? aa_sock_opt_perm+0x74/0x100 [ 219.200396][ T6001] ? sock_common_setsockopt+0x32/0xb0 [ 219.205821][ T6001] ? raw_setsockopt+0xc5/0x180 [ 219.210638][ T6001] ? sock_common_recvmsg+0x1c0/0x1c0 [ 219.215973][ T6001] __sys_setsockopt+0x2bf/0x3d0 [ 219.220888][ T6001] __x64_sys_setsockopt+0xb1/0xc0 [ 219.225971][ T6001] do_syscall_64+0x4c/0xa0 [ 219.230423][ T6001] ? clear_bhb_loop+0x30/0x80 [ 219.235270][ T6001] ? clear_bhb_loop+0x30/0x80 [ 219.240003][ T6001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.246081][ T6001] RIP: 0033:0x7fc0ed846e59 [ 219.250551][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.270194][ T6001] RSP: 002b:00007fc0ebaa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.278645][ T6001] RAX: ffffffffffffffda RBX: 00007fc0edabffa0 RCX: 00007fc0ed846e59 [ 219.286653][ T6001] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 219.294652][ T6001] RBP: 00007fc0ed8dcd6f R08: 000000000000003c R09: 0000000000000000 [ 219.302657][ T6001] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 219.310659][ T6001] R13: 00007fc0edac0038 R14: 00007fc0edabffa0 R15: 00007fff3893c5e8 [ 219.318683][ T6001] [ 219.353720][ T6001] [ 219.356230][ T6001] ============================= [ 219.379932][ T6001] WARNING: suspicious RCU usage [ 219.390744][ T6001] syzkaller #0 Not tainted [ 219.397622][ T6001] ----------------------------- [ 219.403301][ T6001] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 219.413283][ T6001] [ 219.413283][ T6001] other info that might help us debug this: [ 219.413283][ T6001] [ 219.424263][ T6001] [ 219.424263][ T6001] rcu_scheduler_active = 2, debug_locks = 1 [ 219.432849][ T6001] 1 lock held by syz.0.449/6001: [ 219.438022][ T6001] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 219.454395][ T6001] [ 219.454395][ T6001] stack backtrace: [ 219.462390][ T6001] CPU: 0 PID: 6001 Comm: syz.0.449 Not tainted syzkaller #0 [ 219.469735][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.479845][ T6001] Call Trace: [ 219.483157][ T6001] [ 219.486135][ T6001] dump_stack_lvl+0x188/0x250 [ 219.490859][ T6001] ? load_image+0x400/0x400 [ 219.495414][ T6001] ? show_regs_print_info+0x20/0x20 [ 219.500670][ T6001] ? lockdep_rcu_suspicious+0x110/0x180 [ 219.506253][ T6001] ? local_bh_enable+0x20/0x20 [ 219.511061][ T6001] rhltable_lookup+0x61e/0x7c0 [ 219.515866][ T6001] ? local_bh_enable+0x20/0x20 [ 219.520678][ T6001] ? mr_mfc_find_parent+0x190/0x190 [ 219.525917][ T6001] ? mark_lock+0x94/0x320 [ 219.530282][ T6001] ? local_bh_enable+0x20/0x20 [ 219.535087][ T6001] ? mark_lock+0x94/0x320 [ 219.539462][ T6001] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 219.545491][ T6001] ? lock_chain_count+0x20/0x20 [ 219.550562][ T6001] mr_mfc_find_any_parent+0xb6/0x1e0 [ 219.555891][ T6001] ? local_bh_enable+0x20/0x20 [ 219.560697][ T6001] ip_mr_forward+0x24c/0xf90 [ 219.565343][ T6001] ipmr_mfc_add+0x23cc/0x2d40 [ 219.570077][ T6001] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 219.575058][ T6001] ? __lock_acquire+0x7d10/0x7d10 [ 219.580145][ T6001] ip_mroute_setsockopt+0xeaf/0x1250 [ 219.585480][ T6001] ? ipmr_rule_default+0x70/0x70 [ 219.590469][ T6001] ? __might_sleep+0xf0/0xf0 [ 219.595103][ T6001] ip_setsockopt+0x568/0x3130 [ 219.599835][ T6001] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 219.605244][ T6001] ? aa_sk_perm+0x7dc/0x910 [ 219.609790][ T6001] ? aa_af_perm+0x340/0x340 [ 219.614321][ T6001] ? __fget_files+0x40f/0x480 [ 219.619043][ T6001] ? aa_sock_opt_perm+0x74/0x100 [ 219.624015][ T6001] ? sock_common_setsockopt+0x32/0xb0 [ 219.629434][ T6001] ? raw_setsockopt+0xc5/0x180 [ 219.634246][ T6001] ? sock_common_recvmsg+0x1c0/0x1c0 [ 219.639575][ T6001] __sys_setsockopt+0x2bf/0x3d0 [ 219.644467][ T6001] __x64_sys_setsockopt+0xb1/0xc0 [ 219.649534][ T6001] do_syscall_64+0x4c/0xa0 [ 219.653983][ T6001] ? clear_bhb_loop+0x30/0x80 [ 219.658697][ T6001] ? clear_bhb_loop+0x30/0x80 [ 219.663500][ T6001] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.669431][ T6001] RIP: 0033:0x7fc0ed846e59 [ 219.673999][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.693652][ T6001] RSP: 002b:00007fc0ebaa0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.702195][ T6001] RAX: ffffffffffffffda RBX: 00007fc0edabffa0 RCX: 00007fc0ed846e59 [ 219.710458][ T6001] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 219.719074][ T6001] RBP: 00007fc0ed8dcd6f R08: 000000000000003c R09: 0000000000000000 [ 219.727078][ T6001] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 219.735092][ T6001] R13: 00007fc0edac0038 R14: 00007fc0edabffa0 R15: 00007fff3893c5e8 [ 219.743126][ T6001] [ 219.746210][ C0] vkms_vblank_simulate: vblank timer overrun